L40: Assistant Manager – Business Information Security Officer (AUDIT BISO): Hyderabad

• *Job Title:****Assistant Manager – Business Information Security Officer (AUDIT BISO)**

• *Location: Hyderabad**

Are you ready to sit at the intersection of business strategy and cybersecurity? We are looking for an analytical, highly organized professional to translate complex risk frameworks into business\-enabling actions, protecting our organization while driving operational velocity.

• *Work you’ll do**

We are seeking a highly organized, proactive, and meticulous BISO Analyst (Assistant Manager) to serve as a critical bridge between central security governance and our business operations. This position is a critical individual contributor with no direct reports and reports directly to the A\&A BISO Manager. The core mission of this role is to own and optimize operational efficiency by shifting recurring coordination, documentation, and status\-reporting activities away from senior staff, directly enabling leadership to focus on strategic risk management and complex escalations.

Success in this role requires a candidate who thrives in a highly collaborative yet autonomous environment, working independently to drive day\-to\-day security initiatives while partnering cross\-functionally across product, engineering, legal, compliance, and executive teams. You will heavily manage the business unit's operational baseline, with core responsibilities including coordinating intake processes, rigorous action tracking, and managing ticketing queues and due dates.

You will be responsible for reviewing corporate policies and audit evidence, while actively supporting risk and vulnerability assessments, tracking remediation efforts, and coordinating security notifications with necessary follow\-ups. To excel, you must bring a proven track record in security governance, Governance, Risk, and Compliance (GRC), audit readiness, control mapping, and vulnerability remediation, backed by flawless documentation skills, elite time management, and exceptional stakeholder\-influencing capabilities.

• *Key Responsibilities**

• *Operational Queue, Intake \& Time Management**

• **Intake \& Action Coordination:** Manage the entry point for all business\-specific security requests, coordinating intake processes, logging requirements, and driving action\-item tracking to completion.
• **Queue \& Due Date Management:** Autonomously oversee operational ticketing queues, prioritizing tasks, setting clear timelines, and managing due dates to ensure no security requests or milestones fall behind.
• **Independent Execution:** Own day\-to\-day administrative and coordination workflows with minimal supervision, shifting recurring operational and status\-reporting burdens away from senior staff.

• *Documentation, Assessment \& Audit Readiness**

• **A\&A Artifact Maintenance:** Maintain and update critical Assessment \& Authorization (A\&A) documentation, including System Security Plans (SSPs), security control implementation statements, and division policies.
• **Audit Evidence Collection:** Systematically gather, organize, and archive compliance evidence to maintain continuous audit readiness for internal and external evaluations.
• **Assessment Support:** Assist in conducting comprehensive risk and vulnerability assessments across business applications, cloud environments, and third\-party integrations.

• *Remediation, Notifications \& Reporting**

• **Vulnerability \& Risk Tracking:** Monitor risk registers and vulnerability scan outputs, tracking remediation activities cross\-functionally with technical teams to ensure timely resolution.
• **Security Notifications \& Follow\-Ups:** Coordinate the distribution of security alerts, policy changes, and vulnerability notifications to relevant business stakeholders, executing rigorous follow\-up activities to ensure compliance.
• **Status Reporting:** Compile regular operational metrics, KPIs, and progress reports for the A\&A BISO Manager to provide clear visibility into the business unit's overall security posture.

• *Cross\-Functional Stakeholder Management**

• **Cross\-Functional Liaison:** Act as a collaborative partner bridging the gap between the central CISO office and department stakeholders (e.g., Engineering, Product, Legal, and Operations).
• **Control Mapping Collaboration:** Partner with engineering and IT teams to map technical security controls directly to business applications and operational processes.
• **Security Awareness Promotion:** Champion a security\-first culture by providing clear, business\-friendly guidance on security policies and compliance requirements across different disciplines.

Qualifications \& Requirements

• *Category**

• *Requirements**

• *Education \& Experience**

• Bachelor’s degree in Cybersecurity, Information Systems, Business Administration, or related field (or equivalent practical experience).
• 5\-7\+ years of experience in information security, risk management, IT audit, or a hybrid business\-analyst/cybersecurity role.

• *Technical Frameworks \& Tools**

• Solid understanding of information technology security programs, audits, controls, and risk assessments.
• Proficiency in Security \& Compliance frameworks (SOC 2, ISO 27001, NIST 800\-53, PCAOB, CSA, etc.).
• Hands\-on experience navigating Governance, Risk \& Compliance (GRC) tools and ticketing queues.
• Strong fundamental knowledge of cloud service security controls.

• Experience using data analytics visualization and automation tools

Strong fundamental knowledge of application security principles

• *Certifications**

• *Preferred:* CISM, CISSP, CCSP, CISA, CEH, or equivalent information security/audit credentials.

• *Core Workplace Skills**

• **Autonomy \& Independence:** Self\-motivated team player comfortable executing deliverables without constant oversight.
• **Cross\-Functional Collaboration:** Exceptional interpersonal skills to build relationships across engineering, legal, and operational disciplines.
• **Communication:** Strong ability to translate complex, technical security risks into clear, business\-friendly context for non\-technical executives.
• **Time Management:** Elite organizational skills with a proactive approach, managing multiple due dates and overlapping project queues with an appropriate sense of urgency.

• *The Team**

Deloitte Technology team helps power Deloitte’s success. The Deloitte Technology team is the engine that drives Deloitte, which serves many of the world’s largest organizations. We develop and deploy cutting\-edge internal and go\-to\-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.

• *The \~3,000 professionals in Deloitte Technology deliver services internally including:**

• Cyber security

• Technology support

• Technology \& Infrastructure

• Application development and management

• Relationship management group

• Strategy

• Deployment

• PMO

• Financials

• *Cyber Security**

Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, evolving business strategies, and shifting risks and vulnerabilities. By leveraging situational awareness, threat intelligence, and a security culture across the organization, the team helps protect the Deloitte brand.

• *How you’ll grow**

At Deloitte, our professional development plan focuses on helping people at every level of their career to help them to identify and use their strengths to do their best work every day. From entry\-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to help sharpen skills in addition to hands\-on experience in the global, fast\-changing business world. From on\-the\-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

• *Benefits**

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits.

• *Deloitte’s culture**

Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well\-being programs and are continuously looking for new ways to maintain a culture where our people excel and lead healthy, happy lives.

• *Corporate citizenship**

Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill\-based volunteerism, and leadership to help drive positive social impact in our communities.

• *Recruiter tips**

We want job seekers exploring opportunities at Deloitte to feel prepared and confident. To help you with your interview, we suggest that you do your research: know some background about the organization and the business area you’re applying to.

• *Our purpose**

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

• *Our people and culture**

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

• *Professional development**

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state\-of\-the\-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India.

• *Benefits to help you thrive**

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

• *Recruiting tips**

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 373788